popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11341 2023-07-21 13:05 file.exe  

45c1bb2dd4f6dfababf59f93d90537a5


Malicious Library PE File PE32 VirusTotal Malware PDB Remote Code Execution 		2.2 34 ZeroCERT

11342 2023-07-21 13:04 adobe-explorer.exe  

f6637dd80c1bf55fdf7d31f1d857a155


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself sandbox evasion Browser ComputerName 		2 6.2 14 ZeroCERT

11343 2023-07-21 13:02 saqoap.exe  

8c1e52ac9553fab121ee950749fe1d31


UPX Malicious Library MZP Format PE File PE32 VirusTotal Malware RWX flags setting unpack itself 		2.8 49 ZeroCERT

11344 2023-07-21 13:01 reverse.exe  

80cc187a15b6b6340385922631bad640


UPX PE File PE32 Malware download VirusTotal Malware Microsoft suspicious process WriteConsoleW Exploit DNS 		1 2 2.2 32 ZeroCERT

11345 2023-07-21 11:35 file.pdf.exe  

63faba3aff1b5d9cc631bb722bf6c00e


UPX .NET framework(MSIL) AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8.0 M 50 r0d

11346 2023-07-21 10:56 https://optimizationguide-pa.g...  


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 2 4.8 guest

11347 2023-07-21 10:54 https://optimizationguide-pa.g...  


AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 1 3.8 guest

11348 2023-07-21 10:53 https://optimizationguide-pa.g...  


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 2 4.2 guest

11349 2023-07-21 10:45 https://optimizationguide-pa.g...  


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 2 4.2 guest

11350 2023-07-20 17:29 arc.exe  

7f4e427936de0eecd46ce643bf5c0d36


UPX .NET framework(MSIL) Malicious Library Malicious Packer AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Malware download Cobalt Strike Ursnif VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder Interception Windows ComputerName DNS Cryptographic key 		10 6 2 12.2 36 ZeroCERT

11351 2023-07-20 17:22 file.exe  

5c3913024841f5c14f0ef8c9f3d3a4c5


Malicious Library PE File PE32 VirusTotal Malware PDB Remote Code Execution 		2.2 37 ZeroCERT

11352 2023-07-20 17:21 @zerOgr4v1ty_crypted.exe  

b273c68306bfba8fe55a39fe29c5a160


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 4 13.4 31 ZeroCERT

11353 2023-07-20 17:20 Meduza.exe  

40fbeddad5a68665f9cf789dc4658f1a


UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic Windows utilities suspicious process IP Check installed browsers check Tofsee Ransomware Windows Browser Email ComputerName Trojan Banking DNS 		3 3 12.6 36 ZeroCERT

11354 2023-07-20 17:19 ChromeSetup.exe  

34441248d5a40a61b95aa1f20b42f7c0


UPX Malicious Library PE File PE32 DLL PNG Format VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself suspicious process AppData folder Windows crashed 		4.6 14 ZeroCERT

11355 2023-07-20 17:17 3TmlkMVPhlhNLer.exe  

05b44cf21b46b2eb4a99f0a30ce92bc6


.NET framework(MSIL) .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 4 8.4 33 ZeroCERT

keyword